A 2-Week Prescription for Eliminating Supply Chain Threats
Giving users time to detect and then update hijacked packages can help developers avoid using malicious code in software development.
https://www.darkreading.com/attacks-breaches/2-week-supply-chain-threat